2.9Niedrig
systemd systemd
In systemd 259, systemd-journald can send ANSI escape sequences to the terminals of arbitrary users when a "logger -p emerg" command is executed, if ForwardToWall=yes is set.
4.3Mittel
CVE-2018-16866
Beschreibung
An out of bounds read was discovered in systemd-journald in the way it parses log messages that terminate with a colon ':'. A local attacker can use this flaw to disclose process memory data. Versions from v221 to v239 are vulnerable.
Daten: CVE.org, NVD, CISA KEV, FIRST EPSS, Ubuntu. Wiedergegeben wie in der Quelle, auf Englisch.
Betroffene Produkte und Versionen
| Hersteller | Produkt | Versionen | |
|---|---|---|---|
| The systemd Project | systemd | from v221 to v239 |
Referenzen und Patches
- DSA-4367 vendor-advisory
- https://security.netapp.com/advisory/ntap-20190117-0001/
- https://www.qualys.com/2019/01/09/system-down/system-down.txt
- https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2018-16866
- USN-3855-1 vendor-advisory
- 106527 vdb-entry
- GLSA-201903-07 vendor-advisory
- [oss-security] 20190510 Re: System Down: A systemd-journald exploit mailing-list
- 20190513 Re: System Down: A systemd-journald exploit mailing-list
- http://packetstormsecurity.com/files/152841/System-Down-A-systemd-journald-Exploit.html
- 20190513 Re: System Down: A systemd-journald exploit mailing-list
- RHSA-2019:2091 vendor-advisory
- RHSA-2019:3222 vendor-advisory
- RHSA-2020:0593 vendor-advisory